- cypherpunks-legacy - lists.cpunks.org

A proposal to use RSAREF in PGP (fwd)
by prz＠sage.cgd.ucar.EDU 05 May '93

05 May '93

Forwarded message:

1 0

A proposal to use RSAREF in PGP
by prz 05 May '93

05 May '93

To: Jim Bidzos RSA Data Security, Inc. 5 May 93 Dear Jim: I am writing to you to get your approval to install RSAREF into PGP in order to make PGP legal and hopefully end the conflicts regarding patent infringement. You said publicly a number of times that PGP may become legal in the US if it incorporated RSAREF. I assume from these remarks that you would prefer that to happen. So let's do it. PGP now has, in testbed form, RSAREF integrated into it. With your approval, the next release could be an RSAREF version. I say your approval, because it is necessary to use the two static entry points RSAPublicBlock and RSAPrivateBlock in rsa.c in RSAREF to allow backward compatibility with older versions of PGP. Unfortunately, the old versions of PGP have an error that makes the contents of a DEK and MD packet inside of an RSA multiprecision integer not comply with PKCS standards of padding. New versions of PGP will correct this problem, but backward compatibility is needed, so the RSAPublicBlock and RSAPrivateBlock entry points must be called to parse the old packets. The global entry points RSAPublicEncrypt and RSAPrivateEncrypt will also be used to generate the new PKCS-formatted packets. As I understand it, the standard RSAREF license requires your approval to use these entry points. I discussed these ideas with Ron Rivest and Burt Kaliski, and both seemed to not raise any objections. I hope you will agree. At some time in the future, when all the old certifying signatures are eventually replaced with new ones, these static entry points will not have to be called, allowing the the regular entry points in rsa.h to be called in their place. We will be encouraging people to get their certifying signatures renewed on their keys with the new version of PGP. PGP users outside the US will be using a version of PGP without RSAREF, but it will be compatible in every way with the RSAREF version. The PGP developers will also be contributing some speedups to RSAREF in future releases. This will help all of your installed base of RSAREF applications. I am also modifying the PGP User's Guide to remove the remarks in the legal issues section that I suspect you regard as inflammatory. I hope this will pave the way for us to close ranks and work together on fighting the Clipper chip initiative. If there are other measures you'd like me to take to improve relations between us, let me know. I hope our common political objectives will outweigh your personal feelings, so the community of PGP users may work better with you to face these pressing policy issues. The new release can be ready in a few days, if you approve. Regards, Philip Zimmermann

1 0

Big Brother, Rights to Privacy and Broadening Horizons?
by fergp＠sytex.com 05 May '93

05 May '93

Greets, all. After taking a few days off for the pomp and circumstance of my second wedding (no, I'm not a polygamist -- I was divorced first)(genuine thanks to all who sent your congratulations and best wishes), I finally waded through all of the e-mail that had piled up in my "in-box" -- some 800 kb worth, no less. Anyway, to the point -- This morning I was watching CBS's early, early morning news "Up to the Minute" over a cup of Joe before heading to the airport. An interesting spot came on that interested me very much, because of the correlation to several law enforcement agencies' "loose cannon" style of persecution which many of us have witnessed. This particular report spotlighted the DEA's heavy-handed and questionable practice of targeting legitimate gardening store consumers under suspicion of growing marijuana. It just so happens that the DEA had been watching several gardening supply stores which sold hydroponic gardening equipment in some particular area of California. (For those of you who are not familiar with Hydroponics, it is a gardening method which uses water instead of soil. The plants usually grow twice as fast when grown hydroponically and has become a popular method of indoor gardening with marijuana enthusiasts.) In fact, the DEA had gone as far as to place monitoring cameras in place to record the identity of every customer or prospective consumer that went in and out of these legitimate businesses, solely because of their suspicions that some of the customers may be (gasp) growing marijuana. Additionally, a particular instance was cited where a gentleman went into one of these gardening supply stores and bought a couple of lamps for his aquarium. (This young, family-man had some coral in his aquarium at home that he wanted to illuminate.) Later that evening, agents from the DEA burst into his home while he and his family were having dinner, saying that he was under suspicion of growing marijuana and that "reliable witnesses" had tipped them off. After thoroughly searching his home, they apologized and left. Now -- you may ask yourself, "What in the hell does this have to do with me? Or computers?" ("This is not my beautiful wife ....") Well, this may be the same scenario, with the same LEA, but with a different premise. Cryptography. If the Clipper/Capstone implementation has a hidden agenda (I believe it does), then tough restrictions on other "non-sanctioned" crypto methods may not be far behind. Personally, I don't have much of a problem imagining this, given the recent escapades of the SPA (Rusty & Edie's), the Secret Service (SJG) and all of our other beloved governmental law enforcement appartchiks. In fact, I find it down-right disturbing that in many instances, this is done without a warrant. George Orwell is probably rolling over in his grave... -----BEGIN ??? PUBLIC KEY BLOCK----- Version: 2.2 mQCNAiuk0/8AAAEEALqlLc+x9lmgiJCRSpu/aPhQdi0hMjwiGlN2B/GJQqgZPhTb pR+u5/blGogqT+WwcXZ2XfEdIV19FrJY4BXGGn4+4TjdVN3XuuCHuueoygBAmOQD IloU6SJuDqJa0kFA5X/i/1ELn86I5+8A4Hx88FiYJIVUBR6SApRLcZSdHMBNAAUR tB9QYXVsIEZlcmd1c29uIDxmZXJncEBzeXRleC5jb20+iQCVAgUQK9g8HY4wrq++ 1Ls5AQHwVAP/dCsOV1dXBrQMj0wavZymzDdECXlv8auDNcSpxAUFgLdwXm5OuE4Q nOPHryN0UMq5RN2rvC2QJdxIW7gPeXN1RK2so9aGXJtSiip3QS0bN2JCH1sPcYIX NmRQ3Z7J/zqppG7IYlcafUpj0V+GsL6lqLzB8JtBGQER9DAYapvQRR0= =FcQR -----END ??? PUBLIC KEY BLOCK----- Paul Ferguson | Uncle Sam wants to read Network Integrator | your e-mail... Centreville, Virginia USA | Just say "NO" to the Clipper fergp(a)sytex.com | Chip... -------------------------------+------------------------------ I love my country, but I fear it's government.

1 0

Unsubscribe
by vanam＠topper.ksu.ksu.edu 05 May '93

05 May '93

Please remove me from the list.... Stephen

1 0

MEETING (Reminder): UK Cryptoprivacy Association
by whitaker＠eternity.demon.co.uk 05 May '93

05 May '93

-----BEGIN PGP SIGNED MESSAGE----- REMINDER: Meeting of the UK Cryptoprivacy Association - ----------------------------------------------------- When: Saturday, 8 May 1993, 1500 To be held at the offices of: FOREST 4th floor 2 Grosvenor Gardens London SW1W 0DH This is located at the corner of Hobart Place, a couple of blocks west of Victoria Station, and almost directly across from the dark green cabbie shelter. If you have trouble finding the place, please call the office on 071-823-6550. Or, call me (Russell Whitaker) on my pager, 081-812-2661, and leave an informative message with the telephone number where you can be reached; I will return the call almost immediately. Discussion will range from the usual general topics, such as the use of secure public key cryptosystems to protect message data, to specific topics, such as recent moves by the U.S. government to restrict choice in data privacy (reference recent discussion on Usenet groups, e.g. sci.crypt and alt.security.pgp). All are invited. Particularly welcome are members of the newly-formed UK CommUnity group ... the local EFF-in-spirit-if-not-in-name folks. Those who plan to attend should email me and let me know. Please. All attendees are requested to bring diskettes - preferably MS-DOS - with their PGP 2.+ public keys. As is usual at these gatherings, several of us will bring our laptops, and will sign public keys, subject to the usual caveats (reference the documentation for PGP 2.2, specifically files PGPDOC1.DOC and PGPDOC2.DOC). If you do not already have a copy of PGP 2.2 (MS-DOS), and would like to have a copy of this public domain program, please bring a formatted, medium or high density 3.5 inch floppy PC diskette; you will be provided a copy of the program. Of course, you might prefer to ftp a version of the program from one of the various archive sites. I suggest trying Demon Internet Systems, which carries the full range of PGP (Phil Zimmerman's "Pretty Good Privacy") implementations: directory /pub/pgp at gate.demon.co.uk. Meetings are of indeterminate time. Those who are interested are invited to join the rest of us at a pseudorandomly determined pub afterwards. Please note: - ------------ In the past few months, interested people have emailed me, requesting FAQs and special information mailings. I regret that, except in very unusual cases (e.g. working press), I cannot, in a timely manner, respond to these requests. I will, however - and for the first time - do a writeup of this meeting, which I will post in various places. What I *am* willing to supply is general information on our activities for the maintainers of existing FAQs, such as that for alt.privacy. FAQ maintainers can contact me at whitaker(a)eternity.demon.co.uk Russell Earl Whitaker whitaker(a)eternity.demon.co.uk Communications Editor AMiX: RWhitaker EXTROPY: The Journal of Transhumanist Thought Board member, Extropy Institute (ExI) ================ PGP 2.2 public key available ======================= -----BEGIN PGP SIGNATURE----- Version: 2.2 iQCVAgUBK+egtoTj7/vxxWtPAQFSFgQAjTPwfm8I5gaP85Yqm1Dh6IRIb6au2sBI THGLGpPGgEao3MAESN0Cmh3nH6IHdSRthR/Uro8CQcpyD4IgGw912wO2CEYy1K/l v0+n4y+2+YFV/X2LDNntP27G3+zP9N6wMJQs2JHNjExfTHaUKFg9Zb90wTvuU4Ce RIbjnZNNriU= =uFhH -----END PGP SIGNATURE----- -----END PGP SIGNATURE-----

1 0

Re: 'zines
by wcs＠anchor.ho.att.com 05 May '93

05 May '93

> >What is ZENGER magazine and where can I get info on it? If memory serves me correctly, ZENGER is Ben Masel's paper; it's mainly oriented towards hemp activists (and users), but also covers other civil-liberties issues. Peter Zenger was a publisher in New York during colonial times. He was arrested for publishing Bad Things about the King, which was illegal. His trial was helped reinforce important legal precedents for preserving our freedoms - the facts weren't particularly in dispute (he had published the pamphlets, and they did say things the King didn't like), but the jury found him innocent because they thought the law was bad, and juries under the common law have always had the right to judge the law as well as the facts, no matter what the judge says. For more information about this, write to The Fully Informed Jury Association (FIJA), Box 59, Helmville, Montana 59843; this may be an old address, since Larry Dodge has moved to Texas, but there may be mail forwarding. Bill Stewart

3 2

EEPROM Programmers for the PC
by x62727g2＠usma8.USMA.EDU 05 May '93

05 May '93

Possessors of all Knowledge Great and Small, I humbly beseech thy expertise on a manner in which I have none. I have been told that one can by an EEPROM programmer which fits on a card in the PC or a similar version which merley connects to the PC. I would like to know a) if this is so? b) how much they cost? c) where to find them? d) what their memory capacities are? e) do EEPROMS run as fast as regular PROMS? f) an other pertinent data. Thank you very much! Anthony J. Gatlin |-------------------------------------| Cadet Private, Co. G-2 |PGP Public Key available on request. | United States Military Academy |-------------------------------------|

1 0

Re: checks
by George A. Gleason 05 May '93

05 May '93

Re: Much as I respect you Eric, I direct your attention to the myriad of "checks" being sent out by AT&T and MCI, to name a few offenders. These bear the legend: "endorsement of this check constitutes your acceptance of <foo> as your long distance carrier." When those go out in English to non-English speakers and get cashed, there is a good case to be made for consumer fraud. Anyone want to follow up on that...? -gg

1 0

pgp temp files.
by J. Michael Diehl 05 May '93

05 May '93

After using pgp to read an encrypted message, I ran chkdsk on my hard drive. I was astonished to find that chkdsk found an error on my hard drive, but I was even more astonished to find that when I recovered the error to a file, it contained most of a message I had just read using pgp. Apearantly, this was what was left of a temp file that pgp used. IMHO, pgp should have wiped this file. Maybe I should try to use a ramdisk as my temp-file path. Just thought ya'll should know that pgp may not be as secure as we hope. In my effort to write a menu system for pgp-encrypted email, I use pgp very often, and in very unusuall ways. Consequently, I have found a (very) few weaknesses in the program. Is anyone currently supporting pgp, or am I on my own? If anyone is supporting pgp, I'd like to talk to you. ;^) Thanx in advance. +-----------------------+-----------------------------+---------+ | J. Michael Diehl ;-) | I thought I was wrong once. | PGP KEY | | | But, I was mistaken. |available| | +-----------------------------+---------+ | mdiehl(a)triton.unm.edu | "I'm just looking for the opportunity | | mike.diehl(a)fido.org | to be Politically Incorrect! <Me> | | (505) 299-2282 | | +------How do I send email between fidonet and internet?--------+

1 0

Black Ice
by Paul Goggin 05 May '93

05 May '93

I have the January 1993 issue and purchased it, believe it or not at Tower Records in March. I have not seen issue #2 yet. I enjoyed it, it has a different flare than Mondo or Wired,although there is definate similarity. For further info, Subscription Department Black Ice PO Box 1069 Brighton BN2 4YT The issues are 3.95 Pounds, with 1 year subscriptions 15 Pounds. Good Luck. > while we are on the subject, has anyone heard or seen "Black Ice" > if so, where can one get a copy? > -Pete -- R O All Comments Copyright by | Technofetisht A N Paul S. Goggin (1993) | Cypher, Cyber, Chaos V Information Broker | Ergoflux, Interzone E chaos(a)aql.gatech.edu | Carpe Diem: Stop the Clipper wiretap chip Finger account for latest _Phrack_ | Public Key: PGP and RIPEM available ------------------------------------------------------------------------------ Title 18 USC 2511 and 18 USC 2703 Protected -- Monitoring Absolutely Forbidden

1 0